aaaa-nexus — Formally Verified AI Safety APIs

Measured conclusion: Deep-tested. L2 outcome: tools_ok.

Formally verified AI safety APIs. Pay-per-call via USDC (x402). 75+ endpoints, no signup.

Add to your agent

Copy this into your MCP client config:

{
  "mcpServers": {
    "aaaa-nexus — Formally Verified AI Safety APIs": {
      "url": "https://aaaa-nexus.atomadictech.workers.dev/mcp",
      "transport": "streamable-http"
    }
  }
}

Measured tools (44)

• rng_quantum

  Quantum-seeded random bytes with HMAC-SHA256 entropy proof

  Parameters:

  • body — object — For POST tools: JSON body per the matching path in /openapi.json.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• threat_score

  Score a JSON payload for security threats using triality consensus

  Parameters:

  • body — object — For POST tools: JSON body per the matching path in /openapi.json.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• hallucination_oracle

  Get the LLM hallucination threshold constant

  Parameters:

  • body — object — For POST tools: JSON body per the matching path in /openapi.json.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• identity_verify

  Topological identity verification

  Parameters:

  • body — object — For POST tools: JSON body per the matching path in /openapi.json.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• ratchet_register

  Register a new 47-epoch RatchetGate session (MCP CVE-2025-6514 mitigation)

  Parameters:

  • body — object — For POST tools: JSON body per the matching path in /openapi.json.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• authorize_action

  Pre-action authorization gateway — deterministic tool-call gating with cryptographic tokens

  Parameters:

  • body — object — For POST tools: JSON body per the matching path in /openapi.json.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• spending_authorize

  Spending governance — validate agent chain spending within trust-decay bounds

  Parameters:

  • body — object — For POST tools: JSON body per the matching path in /openapi.json.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• lineage_record

  Decision lineage vault — structured decision trace capture with tamper-proof hash chain

  Parameters:

  • body — object — For POST tools: JSON body per the matching path in /openapi.json.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• contract_verify

  Behavioral contract verifier — verify agent policy claims against formal bounds

  Parameters:

  • body — object — For POST tools: JSON body per the matching path in /openapi.json.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• federation_mint

  Agent identity federation — mint cross-platform portable identity tokens

  Parameters:

  • body — object — For POST tools: JSON body per the matching path in /openapi.json.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• aegis_mcp_proxy_execute

  NEXUS AEGIS MCP-Sentinel gateway for prompt-injection resistant tool execution

  Parameters:

  • body — object — For POST tools: JSON body per the matching path in /openapi.json.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• aegis_router_epistemic_bound

  NEXUS AEGIS reverse proxy that blocks high-entropy or low-confidence generations

  Parameters:

  • body — object — For POST tools: JSON body per the matching path in /openapi.json.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• vanguard_continuous_redteam

  NEXUS VANGUARD continuous red teaming for DeFi contracts and transaction bundles.

  Parameters:

  • body — object — For POST tools: JSON body per the matching path in /openapi.json.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• vanguard_mev_route_intent

  NEXUS VANGUARD MEV route intent protection and shield bundle orchestration.

  Parameters:

  • body — object — For POST tools: JSON body per the matching path in /openapi.json.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• vanguard_wallet_govern_session

  NEXUS VANGUARD UCAN governance session issuance for structured wallet approval.

  Parameters:

  • body — object — For POST tools: JSON body per the matching path in /openapi.json.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• vanguard_escrow_lock_and_verify

  NEXUS VANGUARD escrow lock-and-verify with contract validation and release gating.

  Parameters:

  • body — object — For POST tools: JSON body per the matching path in /openapi.json.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• uep_preflight

  UEP phase-0 preflight gate — bounded task summary and friction estimate before execution.

  Parameters:

  • body — object — For POST tools: JSON body per the matching path in /openapi.json.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• uep_context

  UEP context pack synthesis — merge recon snippets into a single agent-facing context object.

  Parameters:

  • body — object — For POST tools: JSON body per the matching path in /openapi.json.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• uep_synthesis_guard

  UEP synthesis guard — block ungrounded expansions when evidence links are missing.

  Parameters:

  • body — object — For POST tools: JSON body per the matching path in /openapi.json.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• uep_autopoiesis_plan

  UEP autopoiesis plan — structured self-maintenance loop proposal with rollback hooks.

  Parameters:

  • body — object — For POST tools: JSON body per the matching path in /openapi.json.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• uep_trace_certify

  UEP trace certification — sign a decision trace checksum for audit vault handoff.

  Parameters:

  • body — object — For POST tools: JSON body per the matching path in /openapi.json.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• uep_aha_detect

  UEP AHA moment detector — novelty spike scoring for epiphany-style gates.

  Parameters:

  • body — object — For POST tools: JSON body per the matching path in /openapi.json.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• sys_constants

  Sys constants snapshot — public tier counts, trust floor, and block dimension anchors.

  Parameters:

  • body — object — For POST tools: JSON body per the matching path in /openapi.json.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• rag_augment

  Trusted RAG augment — retrieve-and-quote augmentation with provenance hashes.

  Parameters:

  • body — object — For POST tools: JSON body per the matching path in /openapi.json.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• text_summarize

  Extractive text summarizer for bounded passages (JSON in, summary out).

  Parameters:

  • body — object — For POST tools: JSON body per the matching path in /openapi.json.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• sys_trust_gate

  Sys trust gate — PASS/FAIL hallucination and drift screen for agent payloads.

  Parameters:

  • body — object — For POST tools: JSON body per the matching path in /openapi.json.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• sys_lint_gate

  Sys lint gate — structural policy lint over JSON agent plans.

  Parameters:

  • body — object — For POST tools: JSON body per the matching path in /openapi.json.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• intent_classify

  Keyword intent classifier for agent utterances — query/command/report/alert lanes.

  Parameters:

  • body — object — For POST tools: JSON body per the matching path in /openapi.json.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• agents_plan

  Rule-based goal decomposition into 3–5 deterministic execution steps.

  Parameters:

  • body — object — For POST tools: JSON body per the matching path in /openapi.json.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• keys_validate

  Validate X-API-Key entitlement tier (paid/extended/master) before gated tool calls.

  Parameters:

  • body — object — For POST tools: JSON body per the matching path in /openapi.json.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• entitlement_attest

  Attest Ed25519-style entitlement token structure + signature for sovereign emit access.

  Parameters:

  • body — object — For POST tools: JSON body per the matching path in /openapi.json.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• omega_intent_route

  Rank sovereign intent lanes (recon/emit/heal/govern/hive/synthesis) — deterministic router.

  Parameters:

  • body — object — For POST tools: JSON body per the matching path in /openapi.json.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• omega_emit_materialize

  Materialize deterministic contract sketch from intent — logic upstream of language.

  Parameters:

  • body — object — For POST tools: JSON body per the matching path in /openapi.json.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• omega_emit_polyglot

  Language-agnostic emit targets from frozen contract — Python/Rust/TS/JS/Go sketches.

  Parameters:

  • body — object — For POST tools: JSON body per the matching path in /openapi.json.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• omega_intent_nl

  Structured intent → agent-facing NL sketch (training signal, not human blueprint).

  Parameters:

  • body — object — For POST tools: JSON body per the matching path in /openapi.json.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• forge_recon

  Polyglot repo recon — language/tier/source breakdown for monadic architectures.

  Parameters:

  • body — object — For POST tools: JSON body per the matching path in /openapi.json.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• forge_certify

  Polyglot 4-axis certify (docs/tests/layout/wire) with scored verdict.

  Parameters:

  • body — object — For POST tools: JSON body per the matching path in /openapi.json.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• forge_wire

  Repo-wide upward-import wire scan — polyglot tier discipline check.

  Parameters:

  • body — object — For POST tools: JSON body per the matching path in /openapi.json.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• forge_tier_infer

  Infer monadic tier placement for a file path from polyglot heuristics.

  Parameters:

  • body — object — For POST tools: JSON body per the matching path in /openapi.json.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• forge_audit

  Compound Forge audit — recon + certify + wire in one deterministic pass.

  Parameters:

  • body — object — For POST tools: JSON body per the matching path in /openapi.json.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• docs_generate

  Deterministic documentation enrichment targets from local path analysis.

  Parameters:

  • body — object — For POST tools: JSON body per the matching path in /openapi.json.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• lint_analyze

  Synthesize lint findings from supplied local analysis artifacts.

  Parameters:

  • body — object — For POST tools: JSON body per the matching path in /openapi.json.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• certify_codebase

  Countersign local Forge certificate with storefront attestation lane.

  Parameters:

  • body — object — For POST tools: JSON body per the matching path in /openapi.json.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• certify_output

  Output certification notary — tamper-evident seal on agent deliverables.

  Parameters:

  • body — object — For POST tools: JSON body per the matching path in /openapi.json.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

Publisher website Repository

Measured by MCPYP probing. Untested fields are omitted, never estimated. Listing is always free; MCPYP never proxies calls or stores user tokens.